<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: smackcoders-wp-ultimate-csv-importer-import-csv-xml-excel-into-wordpress</title><description>Every new CVE for smackcoders-wp-ultimate-csv-importer-import-csv-xml-excel-into-wordpress.</description><link>https://agentprime.io/</link><item><title>CVE-2026-1317: WP Import – Ultimate CSV XML Importer for WordPress &lt;= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name</title><link>https://agentprime.io/advisories/CVE-2026-1317/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1317/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Feb 2026 12:28:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14627: WP Import – Ultimate CSV XML Importer for WordPress &lt;= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink Bypass</title><link>https://agentprime.io/advisories/CVE-2025-14627/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14627/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Jan 2026 16:19:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-13145: WP Import – Ultimate CSV XML Importer for WordPress &lt;= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import</title><link>https://agentprime.io/advisories/CVE-2025-13145/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13145/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Nov 2025 05:45:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12732: WP Import – Ultimate CSV XML Importer for WordPress &lt;= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure</title><link>https://agentprime.io/advisories/CVE-2025-12732/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12732/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Nov 2025 08:28:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10058: WP Import – Ultimate CSV XML Importer for WordPress &lt;= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion</title><link>https://agentprime.io/advisories/CVE-2025-10058/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10058/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Sep 2025 05:18:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10040: WP Import – Ultimate CSV XML Importer for WordPress &lt;= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure</title><link>https://agentprime.io/advisories/CVE-2025-10040/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10040/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Sep 2025 06:38:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2008: Import Export Suite for CSV and XML Datafeed &lt;= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload</title><link>https://agentprime.io/advisories/CVE-2025-2008/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2008/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Apr 2025 04:21:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2007: Import Export Suite for CSV and XML Datafeed &lt;= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion</title><link>https://agentprime.io/advisories/CVE-2025-2007/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2007/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Apr 2025 04:21:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4142: WP Ultimate CSV Importer &lt;= 7.9.8 - Authenticated (Author+) Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2023-4142/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4142/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Aug 2023 02:04:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4141: WP Ultimate CSV Importer &lt;= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2023-4141/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4141/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Aug 2023 02:04:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4139: WP Ultimate CSV Importer &lt;= 7.9.8 - Sensitive Information Exposure via Directory Listing</title><link>https://agentprime.io/advisories/CVE-2023-4139/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4139/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Aug 2023 02:04:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4140: WP Ultimate CSV Importer &lt;= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation</title><link>https://agentprime.io/advisories/CVE-2023-4140/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4140/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Aug 2023 02:04:24 GMT</pubDate><category>CVE</category></item></channel></rss>